CVE-2012-0261 | BDVDB-2026-59127 Detail

Description#

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.op5.com/view.php?id=5094
http://www.osvdb.org/78064
http://secunia.com/advisories/47417
http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
http://seclists.org/fulldisclosure/2012/Jan/62
http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

Exploit#

No public exploit known

History#

Version 12013-12-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.